Fake porn, fake watches and hacking your wallet
Fake porn sites (real Trojan Horses), fake watches (real scams), password cracking (wallet cracking) : Welcome to the world of online crime!
All these sites were taken from the same IP address, namely 210.51.187.{sanitized}. I’m going to show you a wide portfolio of online threats and scams.
To start off, a fake porn site called Pornotube pushes some mailicious files onto your computer. There is the nice way (an EXE file) or the hard way (a malicious PDF).
The files are detected by most AV products:
Oh, and there’s the cousin website as well, with another PDF exploit ‘in-your-face’. Those sites are nasty looking, but that’s another story.
Now, on to the fake watches. What better way than putting a bit of a Swiss flag in there too… Yes, the Swiss are known for their quaility products, and watches in particular. The first time I flew to Geneva, I was amazed by just how many ads and posters of watches were all throughout the airport. If you take a walk near lake Geneva (le Leman), you will see many old buildings with big signs on them, such as Omega, TAG Heuer etc. I stopped in front of a Cartier store to look at some of the watches, of course none of them had price tags on 
You may get the feeling that I like watches hehe… I have a nice (although modest) Swiss Military watch.
Back to our story, here is a “replica” site… I personally would call it a “counterfeit” store, but it wouldn’t sound as nice, would it? They offer “Free shipping worldwide”, how convenient! I really hate counterfeit stuff. Recently I read an article about that industry in China and it really is an out of control problem.
Finally, a page designed for those who want to hack the Russian version of Facebook (vkontakte.ru):
I had Google translate the Russian text for me:
Payment can be made through one of these institutions:
Anything else for you today?
Please note that ICQ hacks are on the ‘winter sale’:
Don’t forget to use the:
Jerome Segura
Warning: all links contained in this post may be dangerous!
Comments:
|
|
